🚀 GateCrash Forms — JSON秒变表单
v0.2.0CLI优先的表单生成器，遵循BYOK理念：把JSON Schema一键渲染成高颜值HTML表单，提交走自管SMTP，响应存本地，零依赖托管。
0· 716·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's requirements, install method, and runtime instructions align with a CLI-first form builder: it installs an npm CLI, runs that CLI via small wrapper scripts, and asks users to configure SMTP credentials locally — nothing here is disproportionate or covert.
评估建议
This skill appears coherent with its stated purpose, but take these practical precautions before installing or providing SMTP credentials: 1) Verify the npm package and author on the npm registry and GitHub link (review package contents and recent activity). 2) Inspect where the CLI stores configuration (so you know where SMTP credentials are written) and consider using an app-specific password or limited mailbox account rather than your main email credentials. 3) If you plan to expose the serve...详细分析 ▾
✓ 用途与能力
Name/description (form builder, BYOK) match the declared binaries (gatecrash-forms, node), the npm install of package gatecrash-forms, example schemas, and CLI wrapper scripts. Requested artifacts are appropriate for a self-hosted form generator.
✓ 指令范围
SKILL.md only instructs installing the CLI, generating forms, serving them, initializing a project, and configuring SMTP via the CLI. It does not direct the agent to read unrelated system files, exfiltrate data, or call unexpected external endpoints. Example commands and file paths are limited to the project (forms/, responses/).
✓ 安装机制
Install is via the public npm package 'gatecrash-forms' (global install). This is a standard, traceable install method — no arbitrary download URLs or archive extraction are used in the skill metadata or SKILL.md.
✓ 凭证需求
The skill declares no required environment variables and does not demand unrelated credentials. It documents storing SMTP credentials via the CLI (smtp.auth.user/pass), which is expected for an email-forwarding form tool. The skill does not request excessive or unrelated secrets.
✓ 持久化与权限
always is false and the skill does not request permanent platform-level presence or modify other skills. It will install a CLI binary and store its own config (expected behavior for a CLI tool).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.2.02026/2/15
Kimi Claw support: Native integration, enhanced features, agent-ready documentation
● 可疑
安装命令
点击复制官方npx clawhub@latest install gatecrash-forms
镜像加速npx clawhub@latest install gatecrash-forms --registry https://cn.longxiaskill.com✓ 镜像可用